Bug#989719: Backport commit 7820a56ccb ("logind: Restore chvt as non-root user without polkit") to bullseye

Punit Agrawal punitagrawal at gmail.com
Fri Jun 11 09:55:50 BST 2021


Package: systemd
Version: 247.3-5
Severity: important
X-Debbugs-Cc: punit1.agrawal at toshiba.co.jp

systemd 245 introduced a bug[0][1] that prevents activating virtual
terminal without CAP_SYS_ADMIN when polkit is disabled (as is the case
on many embedded systems). One consequence of this is that it prevents
running weston from a service as a non-root user.

The problem has since been fixed upstream by commit 7820a56ccb
("logind: Restore chvt as non-root user without polkit")[2]. As 247 is
going to be the version shipped with bullseye and supported for a long
time, it would be great if it can be backported - in it's absence,
users will be forced to run weston in an insecure configuration with
root privileges.

[0] https://gitlab.freedesktop.org/wayland/weston/-/issues/428
[1] https://github.com/systemd/systemd/issues/17473
[2] https://github.com/systemd/systemd/pull/17494/commits/79f3988517cf40e05cedc40ec7c6e49d9a23298a



More information about the Pkg-systemd-maintainers mailing list